tomcat maxHttpHeaderSize 設置不夠大導致 SSO 登錄失敗

2016-11-06 xxxx org.apache.coyote.http11.Http11Processor - Error parsing HTTP request header
 Note: further occurrences of HTTP header parsing errors will be logged at DEBUG level.
java.lang.IllegalArgumentException: Request header is too large
    at org.apache.coyote.http11.InternalInputBuffer.fill(InternalInputBuffer.java:512)
    at org.apache.coyote.http11.InternalInputBuffer.fill(InternalInputBuffer.java:501)
    at org.apache.coyote.http11.InternalInputBuffer.parseHeader(InternalInputBuffer.java:393)
    at org.apache.coyote.http11.InternalInputBuffer.parseHeaders(InternalInputBuffer.java:268)
    at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1011)
    at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:623)
    at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:318)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
    at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
    at java.lang.Thread.run(Thread.java:745)

 

Tomcat 默認的maxHttpHeaderSize設置好像是4K，我們增加到了8K，即8192。在某次升級時，客戶報SSO功能不能使用。后來才發現我們把客戶定義的maxHttpHeaderSize值給覆蓋了，客戶定義的是32K。由於客戶復雜的網絡，可能會在URL中自動增加了一些其它的參數，導致URL中傳遞的東西過多，默認的8K還不夠用，這里后台就會有上面的報錯。把maxHttpHeaderSize值給加大后，這個報錯就消失了，問題也得到解決。